Comptia Linux Xk0 004 Exam Objectives (1 0)

CompTIA Linux+
Certification
Exam Objectives
EXAM NUMBER: XK0-004
About the Exam
Candidates are encouraged to use this document to help prepare for CompTIA Linux+ XK0-004.
CompTIA Linux+ measures the necessary skills of an IT professional with hands-on experience
configuring, monitoring, and supporting servers running the Linux operating system. Successful
candidates will have the knowledge required to configure, manage, operate, and troubleshoot
a Linux environment by using security best practices, scripting, and automation.
These content examples are meant to clarify the test objectives and should not be
construed as a comprehensive listing of all the content of this examination.
EXAM DEVELOPMENT
CompTIA exams result from subject matter expert workshops and industry-wide survey
results regarding the skills and knowledge required of an IT professional.
CompTIA AUTHORIZED MATERIALS USE POLICY
CompTIA Certifications, LLC is not affiliated with and does not authorize, endorse or condone utilizing any
content provided by unauthorized third-party training sites (aka “brain dumps”). Individuals who utilize
such materials in preparation for any CompTIA examination will have their certifications revoked and be
suspended from future testing in accordance with the CompTIA Candidate Agreement. In an effort to more
clearly communicate CompTIA’s exam policies on use of unauthorized study materials, CompTIA directs
all certification candidates to the CompTIA Certification Exam Policies. Please review all CompTIA policies
before beginning the study process for any CompTIA exam. Candidates will be required to abide by the
CompTIA Candidate Agreement. If a candidate has a question as to whether study materials are considered
unauthorized (aka “brain dumps”), he/she should contact CompTIA at examsecurity@comptia.org to confirm.
PLEASE NOTE
The lists of examples provided in bulleted format are not exhaustive lists. Other examples of
technologies, processes, or tasks pertaining to each objective may also be included on the exam
although not listed or covered in this objectives document. CompTIA is constantly reviewing the
content of our exams and updating test questions to be sure our exams are current and the security
of the questions is protected. When necessary, we will publish updated exams based on testing
exam objectives. Please know that all related exam preparation materials will still be valid.
CompTIA Linux+ Certification Exam Objectives Version 1.0 (Exam Number: XK0-004)
TEST DETAILS
Required exam XK0-004
Number of questions Maximum of 90
Type of questions Multiple choice and performance-based
Length of test 90 minutes
Recommended experience 9 – 12 months of hands-on experience configuring,
monitoring, and supporting servers running the Linux OS
Passing score TBD
EXAM OBJECTIVES (DOMAINS)

The table below lists the domains measured by this examination
and the extent to which they are represented:
DOMAIN PERCENTAGE OF EXAMINATION
1.0 Hardware and System Configuration 21%

2.0 Systems Operation and Maintenance 26%
3.0 Security 19%
4.0 Linux Troubleshooting and Diagnostics 20%
5.0 Automation and Scripting 14%
Total 100%
1.0 Hardware and System Configuration
1.1
Explain Linux boot process concepts.
• Boot loaders • File locations - dracut
- GRUB - /etc/default/grub - grub2-install
- GRUB2 - /etc/grub2.cfg - grub2-mkconfig
• Boot options - /boot - initramfs
- UEFI/EFI - /boot/grub - linux.efi
- PXE - /boot/grub2 - vmlinuz
- NFS - /boot/efi - vmlinux
- Boot from ISO • Boot modules and files • Kernel panic
- Boot from HTTP/FTP - Commands
- mkinitrd
1.2
Given a scenario, install, configure, and monitor kernel modules.
• Commands - dmesg • Locations
- lsmod - rmmod - /usr/lib/[kernelversion]
- insmod - depmod - /usr/lib/modules
- modprobe - /etc/modprobe.conf
- modinfo - /etc/modprobe.d/
1.3
Given a scenario, configure and verify network connection parameters.
• Diagnostic tools • Configuration files
- ping - /etc/sysconfig/network-scripts/
- netstat - /etc/sysconfig/network
- nslookup - /etc/hosts
- dig - /etc/network
- host - /etc/nsswitch.conf
- route - /etc/resolv.conf
- ip - /etc/netplan
- ethtool - /etc/sysctl.conf
- ss - /etc/dhcpd.conf
- iwconfig • Bonding
- nmcli - Aggregation
- brctl - Active/passive
- nmtui - Load balancing
1.0 Hardware and System Configuration
1.4
Given a scenario, manage storage in a Linux environment.
• Basic partitions - fdisk - /dev/mapper
- Raw devices - parted - /dev/disk/by-
- GPT - mkfs - id
- MBR - iostat - uuid
• File system hierarchy - df - path
- Real file systems - du - multipath
- Virtual file systems - mount - /etc/mtab
- Relative paths - umount - /sys/block
- Absolute paths - lsblk - /proc/partitions
• Device mapper - blkid - /proc/mounts
- LVM - dumpe2fs • File system types
- mdadm - resize2fs - ext3
- Multipath - fsck - ext4
• Tools - tune2fs - xfs
- XFS tools - e2label - nfs
- LVM tools • Location - smb
- EXT tools - /etc/fstab - cifs
- Commands - /etc/cryptab - ntfs
- mdadm - /dev/
1.5
Compare and contrast cloud and virtualization
concepts and technologies.
• Templates - Anaconda - Overlay networks
- VM - Kickstart - NAT
- OVA • Storage - Local
- OVF - Thin vs. thick provisioning - Dual-homed
- JSON - Persistent volumes • Types of hypervisors
- YAML - Blob • Tools
- Container images - Block - libvirt
• Bootstrapping • Network considerations - virsh
- Cloud-init - Bridging - vmm
1.6
Given a scenario, configure localization options.
• File locations - hwclock • Character sets
- /etc/timezone - time - UTF-8
- /usr/share/zoneinfo • Environment variables - ASCII
• Commands - LC_* - Unicode
- localectl - LC_ALL
- timedatectl - LANG
- date - TZ
2.0 Systems Operation and Maintenance
2.1
Given a scenario, conduct software installations,
configurations, updates, and removals.
• Package types - YUM • Repositories
- .rpm - DNF - Configuration
- .deb - Zypper - Creation
- .tar • Build tools - Syncing
- .tgz - Commands - Locations
- .gz - make • Acquisition commands
• Installation tools - make install - wget
- RPM - ldd - curl
- Dpkg - Compilers
- APT - Shared libraries
2.2
Given a scenario, manage users and groups.
• Creation • Queries - .bash_profile
- useradd - id - .profile
- groupadd - whoami - Global entries
• Modification - who - /etc/bashrc
- usermod -w - /etc/profile.d/
- groupmod - last - /etc/skel
- passwd • Quotas - /etc/profile
- chage - User quota • Important files and file contents
• Deletion - Group quota - /etc/passwd
- userdel • Profiles - /etc/group
- groupdel - Bash parameters - /etc/shadow
- User entries
- .bashrc
2.3
Given a scenario, create, modify, and redirect files.
• Text editors - stderr - cp
- nano - /dev/null - rm
- vi - /dev/tty - scp
• File readers - xargs - ls
- grep - tee - rsync
- cat - Here documents - mkdir
- tail • Text processing - rmdir
- head - grep - ln
- less - tr - Symbolic (soft)
- more - echo - Hard
• Output redirection - sort - unlink
-< - awk - inodes
-> - sed - find
-| - cut - locate
- << - print - grep
- >> - egrep - which
- 2> - wc - whereis
- &> • File and directory operations - diff
- stdin - touch - updatedb
- stdout - mv
2.4
Given a scenario, manage services.
• Systemd management - Targets - /etc/rc.local
- Systemctl - Hostnamectl - /etc/inittab
- Enabled - Automount - Commands
- Disabled • SysVinit (i) runlevel
- Start - chkconfig (ii) telinit
- Stop - enable - Service
- Mask - disable - Restart
- Restart - on - Status
- Status - off - Stop
- Daemon-reload - level - Start
- Systemd-analyze blame - Runlevels - Reload
- Unit files - Definitions of 0–6
- Directory locations - /etc/init.d
- Environment parameters - /etc/rc.d
2.5
Summarize and explain server roles.
• NTP • File servers • Database
• SSH • Authentication server • Print server
• Web • Proxy • Mail server
• Certificate authority • Logging • Load balancer
• Name server • Containers • Clustering
• DHCP • VPN
• SNMP • Monitoring
2.6
Given a scenario, automate and schedule jobs.
• cron • bg • Ctrl+z
• at •& • nohup
• crontab • kill
• fg • Ctrl+c
2.7
Explain the use and operation of Linux devices.
• Types of devices • Monitoring and configuration tools • File locations
- Client devices - lsdev - /proc
- Bluetooth - lsusb - /sys
- WiFi - lspci - /dev
- USB - lsblk - /dev/mapper
- Monitors - dmesg - /etc/X11
- GPIO - lpr • Hot pluggable devices
- Network adapters - lpq - /etc/rc5/udev
- PCI - abrt - /etc/udev/rules.d
- HBA - CUPS
- SATA - udevadm
- SCSI - add
- Printers - reload-rules
- Video - control
- Audio - trigger
2.8
Compare and contrast Linux graphical user interfaces.
• Servers - MATE • Console redirection
- Wayland - KDE - SSH port forwarding
- X11 • Remote desktop - Local
• GUI - VNC - Remote
- Gnome - XRDP - X11 forwarding
- Unity - NX - VNC
- Cinnamon - Spice • Accessibility
3.0 Security
3.1
Given a scenario, apply or acquire the appropriate
user and/or group permissions and ownership.
• File and directory permissions • Context-based permissions - AppArmor
- Read, write, execute - SELinux configurations - aa-disable
- User, group, other - disabled - aa-complain
- SUID - permissive - aa-unconfined
- Octal notation - enforcing - /etc/apparmor.d/
- umask - SELinux policy - /etc/apparmor.d/tunables
- Sticky bit - targeted • Privilege escalation
- GUID - SELinux tools - su
- Inheritance - setenforce - sudo
- Utilities - getenforce - wheel
- chmod - sestatus - visudo
- chown - setsebool - sudoedit
- chgrp - getsebool • User types
- getfacl - chcon - Root
- setfacl - restorecon - Standard
- ls - ls -Z - Service
- ulimit - ps -Z
- chage
3.2
Given a scenario, configure and implement appropriate
access and authentication methods.
• PAM - User-specific access - Public keys
- Password policies - TCP wrappers - Hashing
- LDAP integration - /etc/sshd/ - Digital signatures
- User lockouts - ssh.conf - Message digest
- Required, allowed, or sufficient - sshd.conf • VPN as a client
- /etc/pam.d/ - ssh-copy-id - SSL/TLS
- pam_tally2 - ssh-keygen - Transport mode
- faillock - ssh-add - Tunnel mode
• SSH • TTYs - IPSec
- ~/.ssh/ - /etc/securetty - DTLS
- known_hosts - /dev/tty#
- authorized_keys • PTYs
- config • PKI
- id_rsa - Self-signed
- id_rsa.pub - Private keys
3.0 Security
3.3
Summarize security best practices in a Linux environment.
• Boot security • Importance of disabling root login via SSH - Sendmail
- Boot loader password • Password-less login - Postfix
- UEFI/BIOS password - Enforce use of PKI • Importance of enabling SSL/TLS
• Additional authentication methods • Chroot jail services • Importance of enabling auditd
- Multifactor authentication • No shared IDs • CVE monitoring
- Tokens • Importance of denying hosts • Discouraging use of USB devices
(i) Hardware • Separation of OS data from • Disk encryption
(ii) Software application data - LUKS
- OTP - Disk partition to maximize • Restrict cron access
- Biometrics system availability • Disable Ctrl+Alt+Del
- RADIUS • Change default ports • Add banner
- TACACS+ • Importance of disabling or uninstalling • MOTD
- LDAP unused and unsecure services
- Kerberos - FTP
- kinit - Telnet
- klist - Finger
3.4
Given a scenario, implement logging services.
• Key file locations • Log management • lastb
- /var/log/secure - Third-party agents
- /var/log/messages - logrotate
- /var/log/[application] - /etc/rsyslog.conf
- /var/log/kern.log - journald
- journalctl
3.5
Given a scenario, implement and configure Linux firewalls.
• Access control lists • Technologies • IP forwarding
- Source - firewalld - /proc/sys/net/ipv4/ip_forward
- Destination - Zones - /proc/sys/net/ipv6/ip_forward
- Ports - Run time • Dynamic rule sets
- Protocol - iptables - DenyHosts
- Logging - Persistency - Fail2ban
- Stateful vs. stateless - Chains - IPset
- Accept - ufw • Common application
- Reject - /etc/default/ufw firewall configurations
- Drop - /etc/ufw/ - /etc/services
- Log - Netfilter - Privileged ports
3.0 Security
3.6
Given a scenario, backup, restore, and compress files.
• Archive and restore utilities • Backup types
- tar - Incremental
- cpio - Full
- dd - Snapshot clones
- mirrorvg - Differential
- mirrorlv - Image
• Compression • Off-site/off-system storage
- gzip - SFTP
- xz - SCP
- bzip2 - rsync
- zip • Integrity checks
- MD5
- SHA
4.0 Linux Troubleshooting
and Diagnostics
4.1
Given a scenario, analyze system properties and remediate accordingly.
• Network monitoring and configuration - Wireshark - du
- Latency (i) tshark - df
- Bandwidth - netcat - LVM tools
- Throughput - traceroute - fsck
- Routing - mtr - partprobe
- Saturation - arp • CPU monitoring and configuration
- Packet drop - nslookup - /proc/cpuinfo
- Timeouts - dig - uptime
- Name resolution - host - loadaverage
- Localhost vs. Unix socket - whois - sar
- Adapters - ping - sysctl
- RDMA drivers - nmcli • Memory monitoring and configuration
- Interface configurations - ip - swapon
- Commands - tracepath - swapoff
- nmap • Storage monitoring and configuration - mkswap
- netstat - iostat - vmstat
- iftop - ioping - Out of memory killer
- route - IO scheduling - free
- iperf - cfq - /proc/meminfo
- tcpdump - noop - Buffer cache output
- ipset - deadline • Lost root password
- Single user mode
4.2
Given a scenario, analyze system processes
in order to optimize performance.
• Process management - Priorities - ps
- Process states - Kill signals - lsof
- Zombie - Commands - pgrep
- Uninterruptible sleep - nice - pkill
- Interruptible sleep - renice - PIDs
- Running - top
4.0 Linux Troubleshooting and Diagnostics
4.3
Given a scenario, analyze and troubleshoot user issues.
• Permissions • Authentication - Inode exhaustion
- File - Local - Immutable files
- Directory - External • Insufficient privileges for authorization
• Access - Policy violations - SELinux violations
- Local • File creation • Environment and shell issues
- Remote - Quotas
- Storage
4.4
Given a scenario, analyze and troubleshoot
application and hardware issues.
• SELinux context violations • Firewall • Troubleshooting additional
• Storage - Restrictive ACLs hardware issues
- Degraded storage - Blocked ports - Memory
- Missing devices - Blocked protocols - Printers
- Missing volumes • Permission - Video
- Missing mount point - Ownership - GPU drivers
- Performance issues - Executables - Communications ports
- Resource exhaustion - Inheritance - USB
- Adapters - Service accounts - Keyboard mapping
- SCSI - Group memberships - Hardware or software
- RAID • Dependencies compatibility issues
- SATA - Patching - Commands
- HBA - Update issues - dmidecode
(i) /sys/class/scsi_host/host#/scan - Versioning - lshw
- Storage integrity - Libraries
- Bad blocks - Environment variables
- GCC compatibility
- Repositories
5.0 Automation and Scripting
5.1
Given a scenario, deploy and execute basic BASH scripts.
• Shell environments and shell variables • Extensions • Metacharacters
- PATH • Commenting • Positional parameters
- Global -# • Looping constructs
- Local • File globbing - while
- export • Shell expansions - for
- env - ${} - until
- set - $() • Conditional statements
- printenv -`` - if
- echo • Redirection and piping - case
• #!/ bin/bash • Exit codes • Escaping characters
• Sourcing scripts - stderr
• Directory and file permissions - stdin
- chmod - stdout
5.2
Given a scenario, carry out version control using Git.
• Arguments - merge • Files
- clone - branch - .gitignore
- push - log - .git/
- pull - init
- commit - config
5.3
Summarize orchestration processes and concepts.
• Agent • Infrastructure as code
• Agentless • Inventory
• Procedures • Automated configuration management
• Attributes • Build automation
• Infrastructure automation
CompTIA Linux+ Acronyms
The following is a list of acronyms that appear on the CompTIA

Linux+ exam. Candidates are encouraged to review the complete
list and attain a working knowledge of all listed acronyms as
part of a comprehensive exam preparation program.
ACRONYM SPELLED OUT ACRONYM SPELLED OUT

ACL Access Control List NTP Network Time Protocol
ASCII American Standard for OTP One Time Password
Computer Information Interchange OVA Open Virtualization Appliance
BASH Bourne Again Shell OVF Open Virtualization Format
BIOS Basic Input Output System PAM Pluggable Authentication Module
CIFS Common Internet File System PCI Peripheral Component Interconnect
CPU Central Processing Unit PID Process ID
CUPS Common Unix Printing System PKI Public Key Infrastructure
CVE Common Vulnerability and Exposures PTY Pseudoterminal
DHCP Dynamic Host Configuration Protocol PXE Pre-execution Boot
DTLS Datagram Transport Layer Security RADIUS Remote Authentication Dial-in User Service
EFI Extensible Firmware Interface RAID Redundant Array of Independent Disks
EPEL Extra Packages for Enterprise Linux RDMA Remote Direct Memory Access
FTP File Transfer Protocol RPM RPM Package Manager
GCC GNU Compiler Collection SATA Serial Advanced Technology Attachment
GPIO General Purpose Input Output SCSI Small Computer Systems Interface
GPT GUID Partition Table SELinux Security Enhanced Linux
GPU Graphics Processing Unit SHA Secure Hash Algorithm
GRUB Grand Unified Bootloader SMB Server Message Block
GUI Graphical User Interface SNMP Simple Network Management Protocol
GUID Global Unique Identifier SSH Secure Shell
HBA Host Bus Adapter SSL Secure Sockets Layer
HTTP Hypertext Transfer Protocol SUID Set User ID
HTTPd Hypertext Transfer Protocol daemon TACACS+ Terminal Access Controller
IO Input Output Access Control System Plus
IP Internet Protocol TAR Tape Archive
IPSEC Internet Protocol Security TCP Transmission Control Protocol
ISO International Organization for Standardization TLS Transport Layer Security
JSON JavaScript Object Notation TTY Terminal Type
KDE K Desktop Environment UEFI Unified Extensible Firmware Interface
LDAP Lightweight Directory Authentication Protocol USB Universal Serial Bus
LUKS Linux Unified Key Setup UTF Unicode Transformation Format
LVM Logical Volume Manager VM Virtual Machine
MBR Master Boot Record VNC Virtual Network Computing
MD5 Message Digest 5 VPN Virtual Private Network
MOTD Message of the Day XFS Extents File System
NAT Network Address Translation XRDP XWindows Remote Desktop Protocol
NFS Network File System YAML Yet Another Markup Language
NTFS New Technology File System YUM Yellowdog Updater Modified
Linux+ Proposed Hardware and Software List
CompTIA has included this sample list of hardware and software to assist
candidates as they prepare for the Linux+ exam. This list may also be helpful
for training companies that wish to create a lab component for their training
offering. The bulleted lists below each topic are a sample list and not exhaustive.
EQUIPMENT SOFTWARE
• Laptop or desktop that supports virtualization • Repository access
OR access to a cloud service provider • PuTTY or SSH client
• Network • Automation tools (e.g. Ansible, Puppet)
- Router • Git
- Switch • Virtualization software
- Network adapter
• Internet access RECOMMENDED DISTRIBUTIONS
• *CentOS
SPARE PARTS/HARDWARE • *Ubuntu
• HDD • Fedora
• USB OR DVD media • Debian
• Open SUSE
© 2018 CompTIA Properties, LLC, used under license by CompTIA Certifications, LLC. All rights reserved. All certification programs and education related to such
programs are operated exclusively by CompTIA Certifications, LLC. CompTIA is a registered trademark of CompTIA Properties, LLC in the U.S. and internationally.
Other brands and company names mentioned herein may be trademarks or service marks of CompTIA Properties, LLC or of their respective owners. Reproduction
or dissemination prohibited without written consent of CompTIA Properties, LLC. Printed in the U.S. 04993-Apr2018

Comptia Linux Xk0 004 Exam Objectives (1 0)

Transféré par

Informations du document

Copyright

Formats disponibles

Partager ce document

Partager ou intégrer le document

Options de partage

Avez-vous trouvé ce document utile ?

Ce contenu est-il inapproprié ?

Droits d'auteur :

Formats disponibles

Comptia Linux Xk0 004 Exam Objectives (1 0)

Transféré par

Droits d'auteur :

Formats disponibles

CompTIA Linux+

EXAM OBJECTIVES (DOMAINS)

DOMAIN PERCENTAGE OF EXAMINATION

1.0 Hardware and System Configuration 21%

The following is a list of acronyms that appear on the CompTIA

ACRONYM SPELLED OUT ACRONYM SPELLED OUT

Vous aimerez peut-être aussi